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- The MAILING DATE of this communication appears on tite cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 03 MONTH(S) OR THIRTY (30) DAYS. 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- if NO period for reply is specified above, the maximum statutory period wilt apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )S Responsive to connnnunicatlon(s) filed on 09 August 2002 . 
2a)\3 This action is FINAL. 2b)l3 This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G, 213. 

Disposition of Claims 

4) n Claim(s) is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) S Claim(s) 1^ is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)^ The drawing(s) filed on 09 August 2002 is/are: a)S accepted or b)\Z\ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)E Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2O Certified copies of the priority documents have been received in Application No. . 

30 Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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2) n Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) S Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) Q Notice of Informal Patent Application (PTO-152) 

Paper No(s)/Mail Date 03/28/2002 . 6) □ Other: . 
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DETAILED A CTION 

1 . Claims 1 - 5 were presented for examination. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

2. Claims 1-5 are rejected under 35 USC 102 (b) as being anticipated by Stallings (SNMPvS: A Security 
Enhancement for SNMP, William Stallings, IEEE, 1998). 

Regarding claim 1, Stallings teaches a method for initializing a SNMP (simple network 
management protocol) v3 device, wherein an SNMP manager and an SNMP agent in the SNMP agent in 
the SNMPvS device utilize a Diffie-Helhnan key exchange protocol to enter an initial privacy key and 
an initial agent both generate an associated random number and public value, wherein the SNMP 
manager and the SNMP manager passes its public value to the SNMP agent in a configuration file, 
wherein the SNMP manager reads the public value of the SNMP agent through a SNMP request using 
an initial valid user having access to the public value of the SNMP agent, and wherein the SNMP agent 
and SNMP manager compute a shared secret using the Diffie Hellman key exchange protocol, wherein 
the method is characterized by the steps of : 

Converting the shared secret into a readable password (Fig 7, element: expended hashed 
password string; Page 12, Col 1, lines 29-48; human readable password; concatenating and repeating 
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the users' password to itself to generate digestO; generating digestO from the password; Page 12, Col 2, 
lines 29-40; "actual secret" shared between users and authoritative SNMP engine; single user's key; the 
examiner interprets such ''expended password string'' or "digestO*' or ''digest! " as claimed "readable 
password" because of their similar features); 

Converting the readable password into a secret key ( Page 12, Col 1, lines 38-48; Page 12, Col 2, 
lines 29-40; localized keys; "secret key" shared by users and authoritative SNMP engine; converting 
users keys to unique keys; Page 13, Col 1, lines 1-12; the examiner interprets such "localized key" or 
"unique keys " or "secret keys " as claimed "secret keys " because of their similar features)] and 

Setting an initial authentication key (Page 12, Col 1, lines 29-30; authentication key; Page 12, 
Col 2, lines 25-40; generating authentication key; Page 13, Col 1, lines 1-12; digest 2), and an initial 
privacy key to the value of the secret key (Page 12, Col 1, lines 29-30; privacy key; Page 12, Col 2, lines 
25-40; generating encryption key). 

Regarding claim 2, it is rejected applying as above rejecting claim 1, furthermore, Stallings 
teaches the method wherein the readable password comprises a 16 character password (Page 12, Col 1, 
lines 28-37; human-readable passwords; RFC-2274 algorithm- for mapping password to key; octet 
privacy and authentication key; mapping password to key; Page 12, Col 2, lines 25-40; single/ plurality 
of password to create keys of plurality of bit length; Stallings implies that such password can be eight 
or sixteen or any other suitable characters long depending on the level of security, and plurality of 
shorter password can be concatenated to create a longer password). 
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Regarding claim 3, it is rejected applying as above rejecting claim 1, furthermore, Stallings 
teaches the method wherein the secret key comprises a 16 byte string (Page 12, Col 1, lines 29-49; Page 
13, Col 1, lines 1-10; 16 octet key). 

Regarding claim 4, it is rejected applying as above rejecting claim 1, furthermore, Stallings 
teaches the method further characterized in the configuration file comprises a proprietary configuration 
file element for passing the public value of the SNMP manager to the SNMP agent (Page 3,Col 2, lines 
26- 34; set of documents defining network protocol; proprietary network management applications; Page 
4,Col 2, lines 25-50; Page 9,Col 2, lines 58-66; command generator; USM files in the security related 
parameters; authoritative module). 

Regarding claim 5, it is rejected applying as above rejecting claim 4, furthermore, Stallings 
teaches the method wherein the SNMPv3 device operates in a SNMPvl/ v2c enabled network 
comprising a SNMPv2c device ( Page 2, Col 2, lines 1-37; SNMPv3 defines a security capabiHty to be 
used in conjunction with SNMPv2 or SNMPvl), and wherein the proprietary configuration file element 
is ignored by the SNMPv2c device (Fig 1, element : PDU processing for SNMPvl or SNMPv2, element: 
SNMPv3 USM; Table 2, element: snmpSecurityModel; Page 2, Col 2, lines 5-35; User Security Model 
(USM) for SNMPv3; SNMP Protocol Data Unit (PDU) for SNMPvl and SNMPv2; Page 3, Col 2, lines 
25-45; Management Information Base (MIB) for keeping local configuration data for SNMPv2; 
Stallings teachings of plurality of independent configuration/ security or management protocol for the 
different version of SNMP implies that the proprietary configuration file element used by SNMPv3 
device can be ignored by the SNMPv2c device). 
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Conclusion 

3. A shortened statutory period for response to this action is set to expire in 3 (Three) months and 0 (Zero) 
days from the mailing date of this letter. Failure to respond within the period for response will result in 
ABANDOMENT of the application (see 35 U.S.C 133, M.P.E.P 710.02(b)). 

Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to Shanto Abedin whose telephone number is 571-272-355 1 . The examiner can normally be reached on 
M-F from 9:00 AM to 5:30 PM. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached on 571-272-3795. The fax phone number for the organization where 
this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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SUPERVISORY PATENT EXAMINER 
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Examiner 
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